move resources & comment out k.jenkins until things work
use openid from google apps instead of kerberos (try #1)